Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:
Allegations Over Palm Biometrics IP Against Redrock Execs Withdrawn, Cited as ‘Misinformation’
Forgame Holdings and its affiliate FICL have withdrawn all intellectual property accusations against Redrock Biometrics, co-founder Hua Yang, and Humancode, saying the earlier claims were based on “misinformation.” The June 2024 allegations had challenged ownership of Redrock’s palm biometrics IP, which powers PalmID — software that uses standard RGB/IR cameras for touchless palm verification in payments, healthcare, time/attendance, and device unlock. The resolution removes a reputational barrier for Redrock, allowing it to tell partners its core IP is clean and uncontested as palm biometrics gain traction for high-accuracy, spoof-resistant authentication without special hardware.
Quebec Passes Landmark Digital ID Law Emphasizing Privacy and User Control
Quebec’s National Assembly has passed Bill 82, creating a provincial digital identity framework grounded in privacy by design, selective disclosure, and voluntary use. The law lets residents prove attributes (like age) without oversharing data, bans treating those who opt out as suspicious, and prohibits using government-held digital identity data for profiling or covert surveillance. Oversight sits with the Minister of Cybersecurity and Digital Technology, with plans for phased rollout across government services and eventual cross-provincial and federal interoperability. The Digital ID & Authentication Council of Canada (DIACC) called it a “momentous” model for a pan-Canadian trust framework that balances convenience with citizen control.
XION Rebrands as ‘Verification Infrastructure’ Pioneer to Combat Bot and Synthetic Content
XION has rebranded itself as an enterprise “verification infrastructure company,” distancing from crypto terminology and positioning its stack as compliance-ready for MiCA and eID regulations. The company frames its mission as providing the backend layer that proves “this is human, this is real” in an internet where bots drive ~50% of traffic and synthetic content could approach 90% by 2026. The pitch is that identity and authenticity signals will become baseline infrastructure for online platforms, and XION wants to be the vendor-of-record for that trust layer.
BIO-key Raises $3.1M via Warrant Inducement Deal to Fund IAM Growth
BIO-key raised about $3.1M in gross proceeds through a warrant inducement deal that lowers the exercise price on existing warrants to $1.02 per share and issues new warrants at the same strike — a highly dilutive structure signaling urgent capital needs. The company paired the financing disclosure with news of a new Nordic distribution agreement with IT2Trust for its biometric IAM portfolio, effectively arguing that the dilution funds go-to-market expansion. The move highlights BIO-key’s push to scale in the identity and access management space despite ongoing cash pressure.
Trulioo Enhances Platform with Continuous KYB Risk Intelligence, Web Analytics
Trulioo announced new features that shift Know Your Business (KYB) from one-time onboarding checks to always-on monitoring. “Continuous Business Monitoring” turns KYB into a recurring service with automated alerts on ownership changes, sanctions exposure, and risk events. A new “Web and Social Analytics” layer uses AI to assess a company’s broader digital footprint — sites, listings, social presence — and feeds that into a dynamic business risk and reputation score. The strategy is meant to turn KYB into a subscription-style trust layer for ongoing compliance, not just initial onboarding.
Fingerprint Cards Q3 Revenue Jumps 35%, Boosted by Egis Licensing Deal
Fingerprint Cards (FPC) reported Q3 2025 revenue of SEK 20.4M, up 35% year-over-year, and cut its EBITDA loss to SEK 9.8M from SEK 40.8M. But a large share of that improvement came from IP monetization, not core sensor sales: a one-time SEK 4.8M licensing deal with Egis Technology contributed more than 23% of total revenue and boosted gross margin to 68.6%. FPC is effectively selling legacy PC/mobile assets to fund a pivot toward higher-value biometric and identity markets, using IP licensing and rights issues to finance its transition to recurring, defensible revenue streams.
Google Rolls Out ‘Play Age Signals API’ to Help Developers Comply with New US State Age-Assurance Laws
Google is launching a beta Play Age Signals API so Android developers can receive age-related “signals” (age range, supervision status, verified adult/minor flags) for users in specific U.S. states with new age-verification laws. Rather than directly enforcing age gates, Google is offloading compliance onto app developers — and effectively creating a geofenced regulatory layer where app behavior changes by state. This marks the start of a fragmented compliance map for age assurance in the U.S. and reflects global momentum toward mandatory online age checks, including in the EU and Australia.
Apple Wallet ID Gains Momentum: West Virginia Becomes 12th State as US Passport Support is Confirmed ‘Soon’
Apple says West Virginia is now the 12th state to support mobile driver’s licenses (mDLs) in Apple Wallet, via Idemia. Apple also confirmed that digital U.S. passports in Wallet are “coming soon,” after a brief delay from the original iOS 26 timeline. This “two-track” strategy — state IDs from the bottom up, passports from the federal level — positions Apple Wallet as a universal digital credential for travel and TSA screening, and as a workaround for lagging REAL ID compliance. Apple is also leaning on Apple Pay credibility, citing more than $1B in fraud blocked and a 60–90% security advantage over physical cards to build trust in Wallet-as-ID.
Clearview AI Faces Criminal Complaint in Austria as noyb Seeks Executive Liability
European privacy group noyb has filed a criminal complaint in Austria against Clearview AI and its executives, escalating years of GDPR battles over Clearview’s scraping of face images. EU data protection authorities have already issued roughly €100M in fines against Clearview, but the company has largely refused to comply. By invoking Austrian criminal provisions tied to GDPR, noyb is testing a path to hold executives personally liable — potentially exposing them to arrest if they enter the EU. This marks a shift from administrative penalties to executive-targeted criminal enforcement as regulators try to force biometric surveillance companies to comply.
–
By the ID Tech Editorial Team